Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
File:                     w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft (raw, json)
Hash identifier:          WnocJMYM2vgrj+8MFurHrfYm03B6uF9TIaKB8bs85Rw=
Subject key identifier:   64:A5:51:84:3B:B5:3C:8D:FF:36:C9:C7:26:D6:97:BE:07:EA:0B:D1
Authority key identifier: C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
Certificate issuer:       /CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Certificate serial:       0194BB28EAEB84731738B801BE3D3121C108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
Manifest number:          0A7E
Signing time:             Fri 31 Jan 2025 07:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:08 +0000
Files and hashes:         1: 6bwL5YHScOT2TjF50UOzWmSHFbM.roa (hash: J7fubjulsksJL2y5CCyjiA6636klGKicCVaiq1Tvfs4=)
                          2: w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl (hash: 4Mr4ARc5ixU86+FB07SCQAJtkDZH3AFJ2UnQiQKZLbU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:28:ea:eb:84:73:17:38:b8:01:be:3d:31:21:c1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
        Validity
            Not Before: Jan 31 07:00:08 2025 GMT
            Not After : Feb  1 07:00:08 2025 GMT
        Subject: CN=64a551843bb53c8dff36c9c726d697be07ea0bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:72:aa:c4:27:32:3d:d0:82:bc:2b:19:ba:
                    0c:3b:0e:4c:5b:0c:c2:8a:66:96:37:53:cf:9c:5b:
                    a1:c7:ac:3f:cb:ec:8c:d2:31:77:ac:08:f7:2b:a4:
                    9f:25:e2:49:78:1f:77:be:6c:20:c9:21:22:a3:fc:
                    3b:08:e0:69:fe:ed:49:a2:68:36:82:96:c6:8d:7c:
                    fb:42:07:ee:08:a4:d4:6c:4b:b4:f6:a4:7c:9c:a9:
                    f5:9e:25:8c:b7:71:df:10:14:32:33:8d:ba:ba:fa:
                    fb:65:22:55:84:4c:51:5f:ac:ab:48:ea:73:9c:7d:
                    82:ae:28:11:79:05:da:0f:82:0e:c3:96:87:3a:f0:
                    81:5b:16:0e:dc:f9:48:4c:03:ad:96:92:b2:87:42:
                    71:b1:10:fe:38:df:60:33:1c:1d:1e:4d:ce:ba:31:
                    df:ea:d9:4a:0c:0a:15:09:3e:17:20:76:7d:e0:9d:
                    80:90:41:e0:33:05:61:32:a5:31:93:08:54:22:c9:
                    3a:8e:7b:a4:3f:d7:12:ff:f2:bb:6c:19:30:d8:c3:
                    b6:17:b4:f5:ac:7d:6b:8a:4e:22:30:f1:6b:c3:2d:
                    7a:43:ab:ca:73:dc:71:20:2c:95:db:8d:20:70:d5:
                    c5:9a:31:21:43:11:80:ee:05:d2:66:36:33:66:c3:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A5:51:84:3B:B5:3C:8D:FF:36:C9:C7:26:D6:97:BE:07:EA:0B:D1
            X509v3 Authority Key Identifier:
                keyid:C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fd:4c:6e:ad:49:e0:41:4d:2a:44:19:34:ae:31:ff:f6:8c:
         c7:c4:f4:04:79:35:ad:42:4f:e4:fa:dc:c2:90:49:91:7b:8b:
         c5:bc:df:23:a1:da:6a:0e:29:e1:ac:bd:32:db:0f:67:b0:e6:
         e6:3c:80:57:a3:2a:df:ff:b3:7b:52:42:ef:9c:6a:98:14:a8:
         5d:95:a4:62:80:b5:14:c3:c3:4e:08:10:87:6b:f3:0b:05:82:
         3f:22:f9:91:85:00:4f:94:39:f9:a1:5b:38:d2:87:b1:c1:83:
         a6:ad:eb:0a:c9:0f:23:25:99:18:e7:87:a6:6e:11:b9:52:33:
         8f:87:d9:de:b0:2f:cf:ba:7e:e6:49:59:b0:1a:4f:9d:65:ea:
         28:79:e1:bc:55:c2:34:08:8c:92:58:7a:97:f5:fc:da:8b:2d:
         9e:aa:f5:41:b9:8f:8a:14:bd:59:c0:2d:23:9c:a0:99:f0:ad:
         05:01:9a:cd:ea:3a:4d:94:3b:6f:47:1c:af:59:c3:51:86:a8:
         26:65:e9:89:ac:80:68:d3:0f:3d:96:e5:15:fe:49:67:c3:17:
         41:f9:c8:33:79:3c:87:f6:9c:f9:c0:0f:4c:32:68:f5:3c:af:
         8b:45:a8:f2:a4:a3:56:4b:27:75:e0:8b:d3:3d:f8:4c:90:40:
         3a:20:8e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:10 2025 by rpki-client on console-fra.rpki-client.org